Comment on 'You can now jailbreak your AMD CPU' — Google researchers release kit to exploit microcode vulnerability in Ryzen Zen 1 to Zen 4 chips

vk6flab@lemmy.radio ⁨3⁩ ⁨weeks⁩ ago

• jmcs@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

  90% of security vulnerabilities are caused by “let’s just use/do this for now and change it before production”.

  source

  • vk6flab@lemmy.radio ⁨3⁩ ⁨weeks⁩ ago

    What does the fix look like?

    Code scanners? Hackathons? Code review by new hires? Education? Methodology?

    source

    • jmcs@discuss.tchncs.de ⁨3⁩ ⁨weeks⁩ ago

      All of the above and more? There’s always the risk of something falling through the cracks, so the more layers of security measures you add/can afford the better.

      source
• sanpo@sopuli.xyz ⁨3⁩ ⁨weeks⁩ ago

  I’d like that to be “new”, but… It’s not exactly the first time this exact thing happened in tech.

  source

  • vk6flab@lemmy.radio ⁨3⁩ ⁨weeks⁩ ago

    I spent quite some time trying to find a better way to put it, but stupid, idiot, ignorance, incredulity just didn’t seem to cover the experience of WTAF?

    source